Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
File: HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft (raw, json)
Hash identifier: jnZkepo/NA0XmwRxinKEQxvbBJmyq6Ab+EM2ZIYhCeU=
Subject key identifier: 52:35:A3:95:17:7E:F2:C5:0B:8C:11:85:DC:83:90:48:0A:53:5C:64
Authority key identifier: 1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
Certificate issuer: /CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Certificate serial: 0198793FA9D9731A2E07D2C5C18FD6ABDAE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
Manifest number: 135A
Signing time: Tue 05 Aug 2025 08:01:12 +0000
Manifest this update: Tue 05 Aug 2025 08:01:12 +0000
Manifest next update: Wed 06 Aug 2025 08:01:12 +0000
Files and hashes: 1: HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl (hash: jh8dI/uc92RvL30oY4v1R353KThfw1hwz3XmaYhYaVA=)
2: aW4RufV84k31ipqteYJMKE-MWns.roa (hash: TaIvFNKhSLJsRmqi1+QKHEIHNXDSbVD+wo6DE/PVLR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:3f:a9:d9:73:1a:2e:07:d2:c5:c1:8f:d6:ab:da:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Validity
Not Before: Aug 5 08:01:12 2025 GMT
Not After : Aug 6 08:01:12 2025 GMT
Subject: CN=5235a395177ef2c50b8c1185dc8390480a535c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:5e:8d:1b:d8:1f:13:b1:3f:bc:cc:6f:ee:
21:66:a6:26:f4:a4:e1:18:77:8b:67:5d:68:d7:5f:
76:cf:27:be:a5:0d:52:c2:e6:f7:0f:82:4b:7f:2e:
5f:fb:f2:a7:73:b6:9a:d5:d6:2d:80:5d:23:d3:d1:
12:4f:1a:05:b4:d9:31:32:92:b3:3e:b3:60:77:d7:
68:15:4b:8d:e6:dc:b1:97:84:30:01:4b:c1:79:20:
df:49:3a:5c:d5:87:52:c7:91:6a:d2:c0:5c:58:d0:
ce:ca:6a:0c:8b:d3:96:23:cb:06:99:a3:3b:10:47:
59:71:e1:c7:60:46:ab:18:b8:82:93:f7:05:20:00:
8c:3c:ea:e1:46:b5:ee:46:75:1a:77:87:4b:e9:52:
34:20:fb:48:c9:19:e6:1f:9e:19:8a:62:45:0f:de:
e1:58:3e:4f:6f:c9:74:e0:a1:da:e9:90:af:5a:f5:
a9:56:ce:01:75:ef:9d:75:0b:10:58:ff:f8:71:fc:
e9:eb:25:e7:a5:d3:c9:a7:e2:5d:00:61:2c:cc:c4:
94:88:65:f5:cd:2d:92:18:a2:cd:91:4f:d4:81:18:
93:64:fe:93:43:65:b6:81:66:ac:2f:e8:df:8b:d5:
ad:75:9c:f9:a4:2f:92:85:de:3a:2e:73:19:9c:2d:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:35:A3:95:17:7E:F2:C5:0B:8C:11:85:DC:83:90:48:0A:53:5C:64
X509v3 Authority Key Identifier:
keyid:1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:83:2b:b9:7c:a4:d3:a6:41:6f:b5:67:5e:25:76:d3:d7:4a:
b0:92:54:0d:0f:0e:5c:56:3e:06:94:e3:8d:9a:04:15:ce:9f:
71:6c:1a:ec:0a:17:8c:8e:52:d4:37:91:4f:2e:de:0b:30:65:
49:96:25:a5:3e:07:bf:1a:31:89:05:29:f8:44:9c:ba:49:2f:
51:01:5f:e5:a9:ca:6d:eb:07:1b:67:be:e5:e5:93:ad:08:b7:
55:c5:34:bc:4b:de:55:cd:d1:a0:fd:8e:7d:a0:c9:69:de:e6:
c8:14:bf:4e:13:c8:e3:ff:d2:d6:19:21:ad:18:37:f6:01:f8:
6c:bb:cc:de:ca:58:49:4f:0d:69:34:5c:41:4e:44:53:35:ed:
fe:ee:49:1e:b0:85:2d:31:c1:70:5c:30:6e:8b:c5:34:9e:d7:
c0:03:ac:4e:36:b6:f9:36:d7:e8:1b:26:73:c0:b4:7e:bb:2a:
88:7c:14:66:45:a9:9e:5a:83:95:8d:e1:c1:e6:98:a6:7a:ca:
11:ed:33:9f:6d:ee:8e:56:04:48:23:05:03:9b:da:04:cf:43:
34:f8:5a:cf:ad:3c:39:7d:cc:65:ca:6a:41:44:24:c6:00:2b:
c7:fd:94:21:0d:c4:77:c6:31:67:13:93:9f:a5:eb:29:83:25:
d1:31:06:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:48:38 2025 by rpki-client